$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7682260e-541b-4383-83fb-52ddbae39d57.roa File: 7682260e-541b-4383-83fb-52ddbae39d57.roa (raw, json) Hash identifier: JNvy3U3JyiriKmwFpG6yBtFKl2pfiSz7IdDjh2jHC1I= Subject key identifier: FD:F3:BB:EA:60:CD:63:CF:2A:4B:4A:4B:89:A2:48:05:FD:C7:1F:C0 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6A063032A24A4C252A573CF2A25FD940CCC9559A Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7682260e-541b-4383-83fb-52ddbae39d57.roa Signing time: Tue 23 Sep 2025 00:09:24 +0000 ROA not before: Tue 23 Sep 2025 00:09:24 +0000 ROA not after: Tue 28 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.85.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:06:30:32:a2:4a:4c:25:2a:57:3c:f2:a2:5f:d9:40:cc:c9:55:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 23 00:09:24 2025 GMT Not After : Oct 28 23:59:59 2025 GMT Subject: serialNumber=bb457c326200e9d9b4d148c43fcbe4aec44e62a720f0e326302f4b10dbf85380, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:01:84:62:c8:a0:bd:13:f1:70:39:7f:16:79: d1:f0:73:c8:4b:6c:17:16:57:f3:41:6c:91:e3:21: 23:65:da:11:7f:c6:8e:1d:d3:98:bc:f0:ad:7c:a5: b1:55:3c:c2:c3:d7:45:d3:19:ea:37:f3:7a:64:6d: b1:f7:68:3a:44:ce:f7:64:39:e2:bf:0b:76:2a:86: e5:82:dd:0b:b9:6a:76:30:49:d9:12:dd:7f:95:7d: 8d:c7:5b:39:b0:81:89:8b:32:db:5a:b1:11:af:f8: 64:a7:4a:53:1c:a7:33:57:7d:89:0b:77:be:8a:c9: 76:b8:ae:a4:56:0a:a9:ab:15:60:52:d9:af:a2:5c: 0d:db:14:54:58:e0:27:f3:be:1b:3f:7a:62:3f:19: 2d:50:a8:5b:0b:07:67:a9:34:84:70:70:a8:94:a7: ad:77:1b:33:d9:d3:86:dc:b1:77:c7:2e:4e:9e:38: 43:18:99:6e:d8:7a:52:f6:48:5f:0e:2d:80:49:91: 6c:8f:a9:8d:9c:3d:94:68:db:8e:b5:af:79:2b:0c: 94:bd:c7:3f:a2:d8:60:6d:94:97:f3:f4:38:33:91: 9b:fe:38:11:18:1e:2f:99:e4:63:75:44:9f:b8:91: 5b:8b:a2:3e:f2:78:30:02:7c:08:c8:0a:ad:53:85: c8:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:F3:BB:EA:60:CD:63:CF:2A:4B:4A:4B:89:A2:48:05:FD:C7:1F:C0 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7682260e-541b-4383-83fb-52ddbae39d57.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.85.4.0/24 Signature Algorithm: sha256WithRSAEncryption 41:72:72:d5:e3:00:ec:99:1b:27:cc:63:66:f1:c1:ff:01:65: df:31:aa:62:81:41:eb:2b:14:f8:6f:7b:d3:33:30:75:69:9d: 06:73:84:93:85:c9:af:22:c7:b6:34:ee:67:15:fd:10:2c:70: f1:a8:ff:57:a8:71:85:f1:2b:af:36:a3:ad:de:11:40:d4:8f: 44:23:82:4e:89:3f:47:eb:32:41:4a:83:bd:d7:20:83:f2:2c: 89:78:ec:74:d2:ad:26:30:86:19:ee:5b:1c:de:a1:9d:89:3b: 41:f4:11:02:2d:8a:09:09:7e:12:aa:d1:9e:de:d0:94:5f:53: d6:3e:cc:c6:a1:e9:c0:44:8d:aa:59:80:d3:8e:a0:02:59:a0: 77:a5:ae:52:3d:51:e7:0d:63:66:85:37:02:f4:12:ab:99:da: 1b:78:a9:8b:d0:6b:b2:94:ea:65:f6:f8:51:85:b1:27:32:7e: 1c:86:52:e6:2d:ed:3d:a0:a5:30:3a:8e:07:7d:58:1b:51:6e: ae:a3:68:d7:bc:46:c5:f5:e9:d7:22:c2:a9:5f:68:4b:59:12: 0d:89:d6:44:60:54:6b:82:a6:22:cf:be:6c:31:9d:8b:c7:a2: 58:61:90:f2:d4:d3:ac:e0:ef:fc:b6:89:99:7d:3f:d1:a7:84: dc:fa:0e:ac -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUagYwMqJKTCUqVzzyol/ZQMzJVZowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIzMDAwOTI0WhcNMjUxMDI4MjM1OTU5 WjB6MUkwRwYDVQQFE0BiYjQ1N2MzMjYyMDBlOWQ5YjRkMTQ4YzQzZmNiZTRhZWM0 NGU2MmE3MjBmMGUzMjYzMDJmNGIxMGRiZjg1MzgwMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDBAYRiyKC9E/FwOX8WedHwc8hLbBcWV/NBbJHjISNl2hF/ xo4d05i88K18pbFVPMLD10XTGeo383pkbbH3aDpEzvdkOeK/C3YqhuWC3Qu5anYw SdkS3X+VfY3HWzmwgYmLMttasRGv+GSnSlMcpzNXfYkLd76KyXa4rqRWCqmrFWBS 2a+iXA3bFFRY4Cfzvhs/emI/GS1QqFsLB2epNIRwcKiUp613GzPZ04bcsXfHLk6e OEMYmW7YelL2SF8OLYBJkWyPqY2cPZRo2461r3krDJS9xz+i2GBtlJfz9DgzkZv+ OBEYHi+Z5GN1RJ+4kVuLoj7yeDACfAjICq1ThcixAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU/fO76mDNY88qS0pLiaJIBf3HH8AwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzc2ODIyNjBlLTU0MWItNDM4My04M2ZiLTUyZGRiYWUzOWQ1Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA0VQQwDQYJKoZIhvcNAQELBQADggEBAEFyctXjAOyZGyfMY2bxwf8BZd8x qmKBQesrFPhve9MzMHVpnQZzhJOFya8ix7Y07mcV/RAscPGo/1eocYXxK682o63e EUDUj0Qjgk6JP0frMkFKg73XIIPyLIl47HTSrSYwhhnuWxzeoZ2JO0H0EQItigkJ fhKq0Z7e0JRfU9Y+zMah6cBEjapZgNOOoAJZoHelrlI9UecNY2aFNwL0EquZ2ht4 qYvQa7KU6mX2+FGFsScyfhyGUuYt7T2gpTA6jgd9WBtRbq6jaNe8RsX16dciwqlf aEtZEg2J1kRgVGuCpiLPvmwxnYvHolhhkPLU06zg7/y2iZl9P9GnhNz6Dqw= -----END CERTIFICATE-----Generated at Fri Oct 17 23:47:43 2025 by rpki-client